Cargo.toml

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT License.

[workspace]
resolver = "2"
members = ["crates/*"]

[workspace.package]
edition = "2024"
rust-version = "1.95"
authors = ["The Oxidizer Project Authors"]
license = "MIT"
homepage = "https://github.com/microsoft/ox-tools"

# Adhere to the following rules when adding dependencies:
# * All dependencies specified here need to have default-features turned off - individual crates can enable the
#   features they need
# * Do not create dependency cycles involving dev-dependencies. While Cargo itself may allow this, and even
#   `cargo-release` can deal with them when path-based dependencies are used, they introduce cognitive overhead
#   and tooling uncertainties (e.g. rust-analyzer issues warnings if cycles are present). Until a strong reason
#   is found to allow cycles, we pre-emptively disallow them.

[workspace.dependencies]

# external dependencies
anyhow = { version = "1.0.104", default-features = false }
assert_cmd = { version = "2.2.2", default-features = false }
async-once-cell = { version = "0.5", default-features = false }
blake3 = { version = "1.8.7", default-features = false }
# bolero-libfuzzer 0.13.0 calls bolero_engine::any; bolero/std enables that API for its host build.
bolero = { version = "0.13.4", default-features = false, features = ["std"] }
bolero-engine = { version = "0.13.4", default-features = false }
bytes = { version = "1.12.1", default-features = false }
camino = { version = "1.2.5", default-features = false }
# local dependencies
cargo-aprz-lib = { path = "crates/cargo-aprz-lib", default-features = false, version = "1.1.2" }
cargo-gamma-attrs-impl = { path = "crates/cargo-gamma-attrs-impl", default-features = false, version = "0.2.1" }
cargo-gamma-engine = { path = "crates/cargo-gamma-engine", default-features = false, version = "0.2.1" }
cargo-gamma-lib = { path = "crates/cargo-gamma-lib", default-features = false, version = "0.2.1" }
cargo-gamma-process = { path = "crates/cargo-gamma-process", default-features = false, version = "0.2.1" }
cargo-gamma-rt = { path = "crates/cargo-gamma-rt", default-features = false, version = "0.2.1" }
cargo-gamma-unsafe = { path = "crates/cargo-gamma-unsafe", default-features = false, version = "0.2.1" }
cargo-heather = { path = "crates/cargo-heather", default-features = false, version = "0.2.1" }
# external dependencies
cargo-platform = { version = "0.3.3", default-features = false }
cargo_metadata = { version = "0.23.1", default-features = false }
cel = { version = "0.14.4", default-features = false }
chrono = { version = "0.4.45", default-features = false }
clap = { version = "4.6.6", default-features = false }
clap_complete = { version = "4.6.9", default-features = false }
compact_str = { version = "0.10.0", default-features = false }
csv = { version = "1.4.0", default-features = false }
duct = { version = "1.1.1", default-features = false }
env_logger = { version = "0.11.11", default-features = false }
flate2 = { version = "1.1.10", default-features = false }
futures = { version = "0.3.34", default-features = false }
futures-util = { version = "0.3.34", default-features = false }
ignore = { version = "0.4.33", default-features = false }
indicatif = { version = "0.18.6", default-features = false }
insta = { version = "1.48.0", default-features = false }
layered = { version = "0.3.6", default-features = false }
lcov = { version = "0.8.2", default-features = false }
libc = { version = "0.2.189", default-features = false }
log = { version = "0.4.34", default-features = false }
loom = { version = "0.7.2", default-features = false }
many_cpus = { version = "2.4.16", default-features = false }
mimalloc = { version = "0.1.52", default-features = false }
mmap-rs = { version = "0.7.0", default-features = false }
mutants = { version = "0.0.4", default-features = false }
ohno = { version = "0.5.0", default-features = false }
owo-colors = { version = "4.4.0", default-features = false }
pastey = { version = "0.2.3", default-features = false }
percent-encoding = { version = "2.3.2", default-features = false }
petgraph = { version = "0.8.3", default-features = false }
predicates = { version = "3.1.4", default-features = false }
proc-macro2 = { version = "1.0.107", default-features = false }
# 0.0.349 includes a parser fixture that crashes CodeQL 2.26.4; retry the bump with a newer CodeQL release.
ra_ap_syntax = { version = "0.0.331", default-features = false }
rapidhash = { version = "4.5.1", default-features = false }
reflink-copy = { version = "0.1.30", default-features = false }
regex = { version = "1.13.1", default-features = false }
reqwest = { version = "0.13.4", default-features = false }
rmp-serde = { version = "1.3.1", default-features = false }
rust_xlsxwriter = { version = "0.99.0", default-features = false }
rustc-hash = { version = "2.1.3", default-features = false }
rustc_lexer = { version = "0.1.0", default-features = false }
rustdoc-types-v50 = { package = "rustdoc-types", version = "0.50.0", default-features = false }
rustdoc-types-v51 = { package = "rustdoc-types", version = "0.51.0", default-features = false }
rustdoc-types-v52 = { package = "rustdoc-types", version = "0.52.0", default-features = false }
rustdoc-types-v53 = { package = "rustdoc-types", version = "0.53.0", default-features = false }
rustdoc-types-v54 = { package = "rustdoc-types", version = "0.54.0", default-features = false }
rustdoc-types-v55 = { package = "rustdoc-types", version = "0.55.0", default-features = false }
rustdoc-types-v56 = { package = "rustdoc-types", version = "0.56.0", default-features = false }
rustdoc-types-v57 = { package = "rustdoc-types", version = "0.57.4", default-features = false }
rustsec = { version = "0.33.0", default-features = false }
seatbelt = { version = "0.8.0", default-features = false }
semver = { version = "1.0.28", default-features = false }
serde = { version = "1.0.229", default-features = false }
serde_json = { version = "1.0.151", default-features = false }
serial_test = { version = "4.0.1", default-features = false }
sha2 = { version = "0.11.0", default-features = false }
strsim = { version = "0.11.1", default-features = false }
strum = { version = "0.28.0", default-features = false }
syn = { version = "3.0.4", default-features = false }
tar = { version = "0.4.46", default-features = false }
tempfile = { version = "3.27.0", default-features = false }
terminal_size = { version = "0.4.4", default-features = false }
tick = { version = "0.6.0", default-features = false }
tokio = { version = "1.53.1", default-features = false }
toml = { version = "1.1.4", default-features = false }
toml_edit = { version = "0.25.13", default-features = false, features = ["parse", "display"] }
tracing = { version = "0.1.44", default-features = false }
tracing-subscriber = { version = "0.3.23", default-features = false }
url = { version = "2.5.8", default-features = false }
vu128 = { version = "1.1.0", default-features = false }
walkdir = { version = "2.5.0", default-features = false }
windows = { version = "0.62.2", default-features = false }
windows-sys = { version = "0.61.2", default-features = false }
wiremock = { version = "0.6.5", default-features = false }
zstd = { version = "0.13.3", default-features = false }

# >>> anvil-managed: anvil-workspace-lints
[workspace.lints]
# Catalog of opinionated lints, in dotted-key form so users can extend the
# same scope (`[workspace.lints]` or `[lints]`) outside the sentinels.
# The host-specific table header (`[workspace.lints]` or `[lints]`) is
# prepended by cargo-anvil based on whether the manifest is a workspace
# root or a single-crate Cargo.toml.

# --- rust ------------------------------------------------------------------
rust.ambiguous_negative_literals = "warn"
rust.missing_debug_implementations = "warn"
rust.redundant_imports = "warn"
rust.redundant_lifetimes = "warn"
rust.trivial_numeric_casts = "warn"
rust.unsafe_op_in_unsafe_fn = "warn"
rust.unused_lifetimes = "warn"
# `unexpected_cfgs` is on-by-default at warn since Rust 1.80; combined
# with the catalog's `-D warnings` cloud-workflow policy, any custom cfg name
# becomes a hard build failure. Pre-declare the cfgs that
# `cargo llvm-cov` sets so the recommended coverage-exclusion pattern
# `#[cfg_attr(coverage_nightly, coverage(off))]` works out of the box.
# Adopters who need additional cfg names take ownership of this one
# line (edit the check-cfg array); anvil's drift detector will
# emit a `.anvil-proposed` sibling on future catalog bumps so the
# customization is preserved.
rust.unexpected_cfgs = { level = "warn", check-cfg = [
    'cfg(coverage,coverage_nightly)',
    'cfg(loom)',
    'cfg(miri_race_coverage)',
    'cfg(miri_strict_provenance)',
    'cfg(miri_tree_borrows)',
] }

# --- rustdoc ---------------------------------------------------------------
rustdoc.broken_intra_doc_links = "warn"
rustdoc.missing_crate_level_docs = "warn"
rustdoc.unescaped_backticks = "warn"

# --- clippy: category gates (priority -1 so per-lint allows can override) --
clippy.cargo = { level = "warn", priority = -1 }
clippy.complexity = { level = "warn", priority = -1 }
clippy.correctness = { level = "warn", priority = -1 }
clippy.nursery = { level = "warn", priority = -1 }
clippy.pedantic = { level = "warn", priority = -1 }
clippy.perf = { level = "warn", priority = -1 }
clippy.style = { level = "warn", priority = -1 }
clippy.suspicious = { level = "warn", priority = -1 }

# --- clippy: opinionated additions -----------------------------------------
# Two-repo consensus (oxidizer + oxidizer-github). Restriction-group
# lints that catch real code-smell cases. Adding a workspace-wide lint
# means adopters can only opt out per-crate or by taking ownership of
# this region; only enable when the consensus is strong enough to
# justify that cost.
clippy.allow_attributes = "warn"
clippy.allow_attributes_without_reason = "warn"
clippy.as_pointer_underscore = "warn"
clippy.assertions_on_result_states = "warn"
clippy.clone_on_ref_ptr = "warn"
clippy.deref_by_slicing = "warn"
clippy.disallowed_script_idents = "warn"
clippy.empty_drop = "warn"
clippy.empty_enum_variants_with_brackets = "warn"
clippy.fn_to_numeric_cast_any = "warn"
clippy.if_then_some_else_none = "warn"
clippy.map_err_ignore = "warn"
clippy.multiple_unsafe_ops_per_block = "warn"
clippy.redundant_type_annotations = "warn"
clippy.renamed_function_params = "warn"
clippy.semicolon_outside_block = "warn"
clippy.undocumented_unsafe_blocks = "warn"
clippy.unnecessary_safety_comment = "warn"
clippy.unnecessary_safety_doc = "warn"
clippy.unneeded_field_pattern = "warn"
clippy.unused_result_ok = "warn"
clippy.unwrap_used = "warn"

# --- clippy: opinionated suppressions of category-enabled lints ------------
clippy.missing_const_for_fn = "allow"
clippy.multiple_crate_versions = "allow"
clippy.option_if_let_else = "allow"
clippy.redundant_pub_crate = "allow"
clippy.should_panic_without_expect = "allow"
clippy.significant_drop_tightening = "allow"
# Blocked by Clippy bug: https://github.com/rust-lang/rust-clippy/issues/15036
clippy.wildcard_imports = "allow"
# <<< anvil-managed: anvil-workspace-lints

# --- clippy: catalog entries this project adds outside the managed region ---
# The dotted-key form above keeps `[workspace.lints]` open, so these extend the
# same scope without editing the anvil-managed block and provoking its drift
# detector. They complete the `M-STATIC-VERIFICATION` catalog, which names all
# three: https://microsoft.github.io/rust-guidelines/guidelines/universal/#M-STATIC-VERIFICATION
clippy.empty_structs_with_brackets = "warn"
clippy.too_long_first_doc_paragraph = "warn"
# The guideline's own opt-out: a structured-logging call site legitimately
# passes a literal holding `{field}` placeholders for the logger to expand.
clippy.literal_string_with_formatting_args = "allow"

# A bit of debugging support for release builds.
[profile.release]
debug = "line-tables-only"

# Best perf possible for benchmarks
[profile.bench]
lto = "fat"
codegen-units = 1

# Best debugging experience possible for test builds. Even though this is the default, we specify it explicitly,
# otherwise it appears that cargo-llvm-cov assumes different defaults which leads to only minimal debug info in
# coverage builds.
[profile.test]
debug = "full"

# No debug info for mutation testing to speed up compilation
[profile.mutants]
inherits = "test"
debug = "none"